RE: Remote Support with UAC

2012-01-04 Thread Joseph L. Casale
There is: RUNAS to admin in a CMD window. But you knew that already. :) You misunderstood what I meant, I was referring to the fact when you wait for the application to invoke it, the screen darkens and my experience is that this doesn't transmit through. So I manually invoke as I describe

All in one firewall

2012-01-04 Thread Tom Miller
Hi Folks, I know this have been covered many times before, but I can't find anything in the archive about all in one firewalls. I currently use Fortinet firewalls at my HQ and VPN sites. I like that they have a variety of features in one box (virus scanning, general firewall, content

Re: All in one firewall

2012-01-04 Thread Eric Wittersheim
How about Forefront TMG? If you can get charity pricing from MS the price is very good. On Wed, Jan 4, 2012 at 6:58 AM, Tom Miller tmil...@hnncsb.org wrote: Hi Folks, I know this have been covered many times before, but I can't find anything in the archive about all in one firewalls. I

RE: RAID array rebuild Q

2012-01-04 Thread David Lum
Should have made the mistake in June, that way it's only ~180 days before you could make your next mistake :-) -Original Message- From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: Tuesday, January 03, 2012 7:55 PM To: NT System Admin Issues Subject: Re: RAID array rebuild Q 363

RE: All in one firewall

2012-01-04 Thread Jeff Brown
Keep what you have. Don't pay annual support for less mission critical remote offices? Keep a spare on-hand. From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Wednesday, January 04, 2012 6:59 AM To: NT System Admin Issues Subject: All in one firewall Hi Folks, I know this have been covered

Re: All in one firewall

2012-01-04 Thread Richard Stovall
That is a viable strategy for the hardware, but it doesn't keep the virus and content definitions current. (At least it wouldn't in SonicWall land. I haven't used Fortinet's products.) On Wed, Jan 4, 2012 at 8:57 AM, Jeff Brown jbr...@webcoindustries.comwrote: Keep what you have. Don’t

RE: All in one firewall

2012-01-04 Thread Jeff Brown
You are correct about that. Good point. My bad. From: Richard Stovall [mailto:rich...@gmail.com] Sent: Wednesday, January 04, 2012 8:26 AM To: NT System Admin Issues Subject: Re: All in one firewall That is a viable strategy for the hardware, but it doesn't keep the virus and content

RE: 2003 domain upgrading to 2003 R2 DC

2012-01-04 Thread David Lum
Answered my own Q: http://support.microsoft.com/kb/912309 which is what I suspected. Thanks for reading :) Dave From: David Lum [mailto:david@nwea.org] Sent: Wednesday, January 04, 2012 6:30 AM To: NT System Admin Issues Subject: 2003 domain upgrading to 2003 R2 DC Let me start a more

Re: Concur for expense management

2012-01-04 Thread Christopher Bodnar
the 2003 to 2003 R2 is very simple. More like adding additional features, than a true OS upgrade. You should be fine. No issues. We use Concur here, but do not have federation services configured. Chris Bodnar, MCSE, MCITP Technical Support III Distributed Systems Service Delivery - Intel

Re: All in one firewall

2012-01-04 Thread Andrew S. Baker
I would recommend more Fortinets, or the smaller model Palo Alto devices. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Wed, Jan 4, 2012 at 7:58 AM, Tom Miller tmil...@hnncsb.org wrote: Hi Folks, I know this have been covered

Re: All in one firewall

2012-01-04 Thread Tom Miller
Thanks for the comments. Anyone using the Barracuda web filters? I use a Barracuda spam/smtp virus filter and it works very well. These look like they might do the job. Andrew S. Baker asbz...@gmail.com 1/4/2012 10:26 AM I would recommend more Fortinets, or the smaller model Palo Alto

Re: All in one firewall

2012-01-04 Thread Steve Ens
I'm using the Webfilter. Love it. Integreats well with AD. Reporting is very good too. On Wed, Jan 4, 2012 at 9:36 AM, Tom Miller tmil...@hnncsb.org wrote: Thanks for the comments. Anyone using the Barracuda web filters? I use a Barracuda spam/smtp virus filter and it works very well.

Re: SQL Coding help

2012-01-04 Thread Jeff Steward
*wave* I'll take a stab at it. jstew...@gmail.com http://www.sqlservercentral.com/ is a good resource as is http://www.simple-talk.com/ -Jeff On Wed, Jan 4, 2012 at 10:08 AM, Sean Rector sean.rec...@vaopera.orgwrote: Can any of you provide some assistance (off list, of course) with a small

RE: Neat tip of the week

2012-01-04 Thread Sam Cayze
I got sick of always doing this during DR Test restores, so I set it at the GPO level on all my systems. Done and done for good. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 03, 2012 12:12 AM To: NT System Admin Issues Subject: Neat tip of the

Re: Neat tip of the week

2012-01-04 Thread Erik Goldoff
while your setting environment variables, add 'prompt $T$_$P$G' , adds time to the path at the prompt, VERY useful for troubleshooting On Wed, Jan 4, 2012 at 11:47 AM, Sam Cayze sca...@gmail.com wrote: I got sick of always doing this during DR Test restores, so I set it at the GPO level on all

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread Michael B. Smith
Startup/boot script? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Wednesday, January 04, 2012 1:14 PM To: NT System Admin Issues Subject: GPO reset of local non-builtin accounts Is there a way to GPO a

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread David Lum
Ohh..do tell - have a script handy that I can modify? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, January 04, 2012 10:21 AM To: NT System Admin Issues Subject: RE: GPO reset of local non-builtin accounts Startup/boot script? Regards, Michael B. Smith Consultant and

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread Matthew W. Ross
Try: net user localuser n3wP@ssw0rd --Matt Ross Ephrata School District - Original Message - From: David Lum [mailto:david@nwea.org] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Wed, 04 Jan 2012 10:27:38 -0800 Subject: RE: GPO reset of local

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread Crawford, Scott
Keep in mind that these scripts will be stored in plain text with readable passwords. From: David Lum [mailto:david@nwea.org] Sent: Wednesday, January 04, 2012 12:28 PM To: NT System Admin Issues Subject: RE: GPO reset of local non-builtin accounts Ohh..do tell - have a script handy that I

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread Kennedy, Jim
Then convert it to an exe or encrypt it to help keep prying eyes out of it. http://www.abyssmedia.com/quickbfc/ -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Wednesday, January 04, 2012 1:37 PM To: NT System Admin Issues Subject: RE: GPO reset of

RE: Concur for expense management

2012-01-04 Thread Brian Desmond
There’s no need to have 2003 R2 DCs. The federation stuff is all web based and belongs on another server anyway. Also, 2003R2 is going to be ADFSv1 (and no SAML) vs ADFS2 on 2008R2. You want ADFSv2 which means 2008R2. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c –

RE: SQL Coding help

2012-01-04 Thread Brian Desmond
If you post the question I'll look... Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Wednesday, January 04, 2012 9:09 AM To: NT System Admin Issues Subject: SQL Coding help Can any of you provide some

RE: Concur for expense management

2012-01-04 Thread David Lum
Sweet thanks for your reply Brian! Next wrinkle, trying to install ADFS on two different 2K8R2 servers fails…investigating… From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Wednesday, January 04, 2012 10:55 AM To: NT System Admin Issues Subject: RE: Concur for expense management

Re: Neat tip of the week

2012-01-04 Thread Ben Scott
On Wed, Jan 4, 2012 at 11:59 AM, Erik Goldoff egold...@gmail.com wrote: while your setting environment variables, add 'prompt $T$_$P$G' , adds time to the path at the prompt, VERY useful for troubleshooting Why, so when you find the command prompt window sitting at RMDIR /S C:\ you

Re: GPO reset of local non-builtin accounts

2012-01-04 Thread Ben Scott
On Wed, Jan 4, 2012 at 1:39 PM, Kennedy, Jim kennedy...@elyriaschools.org wrote: net user localuser n3wP@ssw0rd Then convert it to an exe or encrypt it to help keep prying eyes out of it. Do note that such solutions only obfuscate the password. The conversion has to be able to reverse the

Re: SQL Coding help

2012-01-04 Thread Ben Scott
On Wed, Jan 4, 2012 at 10:08 AM, Sean Rector sean.rec...@vaopera.org wrote: Can any of you provide some assistance (off list, of course) with a small bit of SQL code I’m trying to write or recommend an active SQL list? I know some SQL. Post it on-list so everyone can benefit, and I'll see if

Re: Neat tip of the week

2012-01-04 Thread Erik Goldoff
gotta clean my keyboard now, thanks for the laugh ! On Wed, Jan 4, 2012 at 2:05 PM, Ben Scott mailvor...@gmail.com wrote: On Wed, Jan 4, 2012 at 11:59 AM, Erik Goldoff egold...@gmail.com wrote: while your setting environment variables, add 'prompt $T$_$P$G' , adds time to the path at the

RE: SQL Coding help - Solved

2012-01-04 Thread Sean Rector
Thanks to the help from Jeff Steward! Sean Rector, MCSE From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Wednesday, January 04, 2012 9:09 AM To: NT System Admin Issues Subject: SQL Coding help Can any of you provide some assistance (off list, of course) with a small bit of

RE: Neat tip of the week

2012-01-04 Thread Michael B. Smith
Almost: rd /s /q c:\ :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, January 04, 2012 2:15 PM To: NT System Admin Issues Subject: Re: Neat tip of the week gotta clean my keyboard now,

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread James Hill
There certainly is (with GPP). It can be used to create, update or delete local users Computer Configuration/Preferences/Control Panel Settings/Local Users and Groups Create a new Local User and fill in the details:- This is a great GPP to do a domain wide change of the local Admin

RE: Concur for expense management

2012-01-04 Thread Free, Bob
Ditto. We went from our old internal hosted to external Concur last year using SAML for authN. No ADFS. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Wednesday, January 04, 2012 7:01 AM To: NT System Admin Issues Subject: Re: Concur for expense management the 2003 to 2003

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread ed ziots
You can use cusrmgr.exe from the Windows 2000 Resource kit tools to script out the GPO changes. Better yet, as mentioned earlier it would be best to control who is in your local administrators to domain based accounts that are added by GPO/GPP and remove any others from those privileged

RE: Concur for expense management

2012-01-04 Thread David Lum
Wait – Concur is telling us we need ADFS 2.0 to use SAML. How do you do it without ADFS? From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, January 04, 2012 1:01 PM To: NT System Admin Issues Subject: RE: Concur for expense management Ditto. We went from our old internal hosted to external

Backbone issues?

2012-01-04 Thread Groups
Hi all, Anyone noticing backbone and routing problems? I've had 2 people call up with routing issues. One is on Comcast, one is on ATT. One is going to realpage.com and the other to apptix, but same type of symptoms on tracerts. Thanks for your input. Dave ~ Finally, powerful endpoint

RE: Concur for expense management

2012-01-04 Thread Brian Desmond
SAML is a standard protocol. Numerous federation products implement it not to mention I’ve seen customers write home grown glue to do it. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Wednesday, January 04,

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread David Lum
Good suggestion. Questions: 1. If you need to log on locally and the domain is unavailable (it happens), how do you log in? 2. Isn't it best practice to disable the builtin admin account and use a new local admin account with a different name? IIRC #2 was suggested practice years ago (I can't

Length of UPN vs SamAccountName

2012-01-04 Thread Christopher Bodnar
Wanted to see what others thoughts on this issue are. So SamAccountName is limited to 20 characters and UPN is limited to 64. In our environment the standard is to have both be the same (i.e. ) jdoe j...@acme.com I've found a few accounts that don't follow this convention (i.e. ) jdoe

Re: IIS 4.0 and .docx MIME types

2012-01-04 Thread Ben Scott
On Thu, Dec 22, 2011 at 2:35 PM, Blasko, Margo margo.bla...@dcc-cdc.gc.ca wrote: Entered application/vnd.openxmlformats-officedocument.wordprocessingml.document as the .docx MIME type in ISS 4.0 on a Windows 2000 server. Unfortuantely the docx documents still will not open. The error is 'Word

SCCM 2012 RC and upgrade paths?

2012-01-04 Thread Matthew W. Ross
Hey All. I'm back at looking at SCCM, and I see there is a 2012 Release Candidate. I'm interested in trying this, but my last attempt at 2007 was a bit clunky. I'm hoping for more success with 2012. So, my question: Is it known weather or not SCCM 2012 Release Canidate can be upgradable to

2008 R2 DHCP / MAC Address Filtering / mass import of MAC ID's

2012-01-04 Thread Devin Meade
So I am finally replacing our 2003 DHCP servers with 2008 R2. I see the option to allow only those MAC ID's that we know about. We have a small network, and I am reviewing the current leases. Our IT dept knows about each device (whoo hoo) that is currently leased. I would *like* to enable this

Re: SQL Coding help

2012-01-04 Thread Jeff Steward
I did the free consulting already :) Common Table Expressions to the rescue. -Jeff On Wed, Jan 4, 2012 at 2:14 PM, Ben Scott mailvor...@gmail.com wrote: On Wed, Jan 4, 2012 at 10:08 AM, Sean Rector sean.rec...@vaopera.org wrote: Can any of you provide some assistance (off list, of course)

Re: 2008 R2 DHCP / MAC Address Filtering / mass import of MAC ID's

2012-01-04 Thread Don Ely
I'll bite... What's the requirement for need for doing this? On Wed, Jan 4, 2012 at 2:49 PM, Devin Meade devin.me...@gmail.com wrote: So I am finally replacing our 2003 DHCP servers with 2008 R2. I see the option to allow only those MAC ID's that we know about. We have a small network, and

Re: 2008 R2 DHCP / MAC Address Filtering / mass import of MAC ID's

2012-01-04 Thread Don Ely
requirement OR need On Wed, Jan 4, 2012 at 2:55 PM, Don Ely don@gmail.com wrote: I'll bite... What's the requirement for need for doing this? On Wed, Jan 4, 2012 at 2:49 PM, Devin Meade devin.me...@gmail.com wrote: So I am finally replacing our 2003 DHCP servers with 2008 R2. I see

Re: Length of UPN vs SamAccountName

2012-01-04 Thread Kurt Buff
I would say that it's not an issue. I *do* isolate all service and privileged accounts in a separate top-level OU, however, as I believe that it makes them easier to manage. Kurt On Wed, Jan 4, 2012 at 14:28, Christopher Bodnar christopher_bod...@glic.com wrote: Wanted to see what others

RE: GPO reset of local non-builtin accounts

2012-01-04 Thread James Hill
1. You'd still have a local admin account. I prefer to used restricted groups GPO so that it forces the local admin memberships. 2. Yes, not sure how really effective it is though apart from being one more step to take when attempting a breach. From: David Lum

Re: 2008 R2 DHCP / MAC Address Filtering / mass import of MAC ID's

2012-01-04 Thread Devin Meade
No requirement, just curious cuz I see this option. I have this disabled for now. On Wed, Jan 4, 2012 at 4:55 PM, Don Ely don@gmail.com wrote: requirement OR need On Wed, Jan 4, 2012 at 2:55 PM, Don Ely don@gmail.com wrote: I'll bite... What's the requirement for need for doing

Re: 2008 R2 DHCP / MAC Address Filtering / mass import of MAC ID's

2012-01-04 Thread Steve Kradel
Can this be scripted through netsh ... add reservedip? http://technet.microsoft.com/en-us/library/cc787375(WS.10).aspx At any rate, you should do MAC-based filtering at the router or managed switch, if your intent is to keep unauthorized devices from pestering the network, set up a guest network,

RE: SCCM 2012 RC and upgrade paths?

2012-01-04 Thread Rod Trent
Release will most likely be during MMS 2012, as Microsoft is waiting to release all System Center Suite 2012 products at the same time. Interesting that you ask this question. We just posted an answer (from a recent SCCM Guru webcast QA with Wally Mead):

Re: SQL Coding help

2012-01-04 Thread Ben Scott
On Wed, Jan 4, 2012 at 5:49 PM, Jeff Steward jstew...@gmail.com wrote: I did the free consulting already :) Common Table Expressions to the rescue. See, now, I regard that as unfortunate. I don't know what Common Table Expressions are, and this could have been a learning experience for me.

Re: SQL Coding help

2012-01-04 Thread Richard Stovall
In my house growing up, the common table expressions were pretty simple. Please pass the item. May I be excused? etc. On Wed, Jan 4, 2012 at 8:19 PM, Ben Scott mailvor...@gmail.com wrote: On Wed, Jan 4, 2012 at 5:49 PM, Jeff Steward jstew...@gmail.com wrote: I did the free consulting

RE: SCCM 2012 RC and upgrade paths?

2012-01-04 Thread Brian Desmond
Is the RC supported in production though? If not (what I assume), the bigger question is why this question is surfacing in the first place. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Rod Trent

RE: SCCM 2012 RC and upgrade paths?

2012-01-04 Thread Rod Trent
RC in production is supported only for the TAP and CEP customers because Microsoft has been working with these groups all through the beta. Everyone else should be running RC in a lab environment (non-production) - and Microsoft is not indebted to help those folks upgrade. No big deal...this

RE: SQL Coding help

2012-01-04 Thread Brian Desmond
CTEs basically let you create a pseudo table to query from within a query. I use them for deduplicating records usually with the ROW_NUMBER() function. WITH myCTE AS ( SELECT Col1, Col2, Col3 FROM T1 ) SELECT

RE: SCCM 2012 RC and upgrade paths?

2012-01-04 Thread Brian Desmond
Yes that's what I expected. I'd certainly be deploying it in a lab to get familiar with the changes, etc. That said, I wouldn't put it in the lab I use to model production as who knows what happens when you do the RCRTM upgrade there versus a fresh RTM install. Thanks, Brian Desmond

Re: SQL Coding help

2012-01-04 Thread Ben Scott
On Wed, Jan 4, 2012 at 9:21 PM, Brian Desmond br...@briandesmond.com wrote: CTEs basically let you create a pseudo table to query from within a query. I use them for deduplicating records usually with the ROW_NUMBER() function. Ah. Cool. Thanks! See? This way, everyone wins. :) --